Analysis
- max time kernel
103s - max time network
87s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/09/2026, 12:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
myproject5.exe
Resource
win10v2004-20260911-en
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
myproject5.exe
Resource
win11ltsc2024-20260911-en
3 signatures
900 seconds
General
- Target myproject5.exe
- Size 452KB
- Sample260930-ppj6csv1bv
- SHA256 981a3b802fa9a72aab862821885369e969b5afc1915a43bdeaf410f343fb14bf
- MD5 903f7672da8fea06987dea5267bb1d98
- SHA1 29b21f42b600a6b55b343a7ab34319c512c0af09
- SHA512 7fd4a5755110b34509b8894782441de8166ef7e59bd4830dc1e497bea9049d0022c5487131fa1eb7c50665f1ba270897515706b3f6d3f9081a418ae40635763c
- SSDEEP 6144:tRqV1Bdgw8XbhlweIKedSMaxTnLkr3k78yRMalI2AJhKsGWqd6cBCTbDuzOsGn/b:tRc1BdX8LnZIQnOyRZhEqN8/O
- TLSH T1D0A47D87F28400EDE856E13D938ED226F9727C940351E5CF23A0A2312E67AE49E7DF55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Sets service image path in registry 3 TTPs 1 IoCs
This determines the executable launched when a service starts. It can be used to establish persistence.
description ioc Process Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\ndakanlj\ImagePath = "\\??\\C:\\Users\\Admin\\AppData\\Local\\Temp\\ndakanlj.sys" myproject5.exe - Suspicious behavior: LoadsDriver 1 IoCs
pid Process 2248 myproject5.exe - Suspicious use of AdjustPrivilegeToken 4 IoCs
description pid Process Token: SeLoadDriverPrivilege 2248 myproject5.exe Token: SeDebugPrivilege 2248 myproject5.exe Token: SeBackupPrivilege 2248 myproject5.exe Token: SeRestorePrivilege 2248 myproject5.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1